NFL Week4 Live

25:I[7638,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js","/_next/static/chunks/1w1axrg6kzses.js","/_next/static/chunks/1l73s1hqiu28q.js","/_next/static/chunks/1kn_tf3p-ubex.js","/_next/static/chunks/1wq095nwqbaw1.js"],"SampleDetailWrapper"] 2b:I[27201,["/_next/static/chunks/3q3zujqgvmbhp.js","/_next/static/chunks/1sl4dwu7ouhir.js","/_next/static/chunks/3eaw1sz4hhkwg.js","/_next/static/chunks/0poobxhsa58tt.js","/_next/static/chunks/3utyn4akhmarc.js"],"IconMark"] 26:Tf85,Pattern match: "https://sportslivegame2020.blogspot.com/2020/10/nfl-week4-live.html" Pattern match: "https://sportslivegame2020.blogspot.com/favicon.ico" Pattern match: "https://sportslivegame2020.blogspot.com/feeds/posts/default" Pattern match: "https://sportslivegame2020.blogspot.com/feeds/posts/default?alt=rss" Pattern match: "https://www.blogger.com/feeds/2593728010103516939/posts/default" Pattern match: "https://sportslivegame2020.blogspot.com/feeds/4304760734249315640/comments/default" Pattern match: "fonts.gstatic.com/s/roboto/v20/KFOjCnqEu92Fr1Mu51TjASc6CsQ.woff2" Pattern match: "git.io/normalize" Pattern match: "https://www.blogblog.com/indie/mspin_black_large.svg" Pattern match: "https://www.blogblog.com/indie/mspin_white_large.svg" Pattern match: "https://themes.googleusercontent.com/image?id=L1lcAxxz0CLgsDzixEprHJ2F38TyEjCyE3RSAjynQDks0lT1BDc1OxXKaTEdLc89HPvdB11X9FDw" Pattern match: "https://www.gstatic.com/external_hosted/clipboardjs/clipboard.min.js" Pattern match: "https://www.blogger.com/dyn-css/authorization.css?targetBlogID=2593728010103516939&zx=12a9703d-9886-481c-b7f6-dd76fa74009a" Pattern match: "https://sportslivegame2020.blogspot.com/" Pattern match: "http://www.w3.org/1999/xlink" Pattern match: "https://sportslivegame2020.blogspot.com/search" Pattern match: "http://schema.org" Pattern match: "https://lh3.googleusercontent.com/ULB6iBuCeTVvSjjjU1A-O8e9ZpVba6uvyhtiWRti_rBAs9yMYOFBujxriJRZ-A=w1200" Pattern match: "https://lh3.googleusercontent.com/ULB6iBuCeTVvSjjjU1A-O8e9ZpVba6uvyhtiWRti_rBAs9yMYOFBujxriJRZ-A=h60" Pattern match: "https://www.blogger.com/share-post.g?blogID=2593728010103516939&postID=4304760734249315640&target=" Pattern match: "https://www.blogger.com/share-post.g?blogID=2593728010103516939&postID=4304760734249315640&target=facebook" Pattern match: "https://www.blogger.com/share-post.g?blogID=2593728010103516939&postID=4304760734249315640&target=twitter" Pattern match: "https://www.blogger.com/share-post.g?blogID=2593728010103516939&postID=4304760734249315640&target=pinterest" Pattern match: "https://www.blogger.com/share-post.g?blogID=2593728010103516939&postID=4304760734249315640&target=email" Pattern match: "https://sportslivegame2020.blogspot.com/2020/10/nfl-week4-live.html'/" Pattern match: "https://sportsaccess.xyz/nfl-week4-live/" Pattern match: "https://sportslivegame2020.blogspot.com/2020/09/watch-nfl-sunday-football-2020-live_13.html" Pattern match: "https://sportslivegame2020.blogspot.com/2020/09/watch-nfl-sunday-football-2020-live_13.html'/" Pattern match: "https://sportslivegame2020.blogspot.com/2020/09/watch-nfl-sunday-football-live.html" Pattern match: "https://sportslivegame2020.blogspot.com/2020/09/watch-nfl-sunday-football-live.html'/" Pattern match: "https://sportslivegame2020.blogspot.com/2020/09/nfl-sunday-football-2002-live-streaming.html" Pattern match: "https://sportslivegame2020.blogspot.com/2020/09/nfl-sunday-football-2002-live-streaming.html'/" Pattern match: "https://www.blogger.com" Pattern match: "http://www.offset.com/photos/394244" Pattern match: "s10.histats.com/js15_as.js" Pattern match: "sstatic1.histats.com/0.gif?4409642&101" Pattern match: "https://www.blogger.com/profile/15387406030338768137" Pattern match: "https://sportslivegame2020.blogspot.com/2020/10/" Pattern match: "https://sportslivegame2020.blogspot.com/2020/09/" Pattern match: "https://sportslivegame2020.blogspot.com/2020/05/" Pattern match: "https://www.blogger.com/go/report-abuse" Pattern match: "https://resources.blogblog.com/blogblog/data/res/1289005290-indie_compiled.js" Pattern match: "https://www.blogger.com/static/v1/widgets/1783702637-widgets.js" Pattern match: "www.blogger.com/rearrange?blogID\x3d2593728010103516939','//sportslivegame2020.blogspot.com/2020/10/nfl-week4-live.html','2593728010103516939" Pattern match: "https://www.blogger.com/static/v1/jsbin/3182931819-lbx.js" Heuristic match: "existence.lt"27:T16936," NFL Week4 Live Chrome, Firefox OS and Opera --> Windows Phone --> Can't find substitution for tag [blog.ieCssRetrofitLinks]--> [if IE]>

" "_WidgetManager._SetDataContext([{'name': 'blog', 'data': {'blogId': '2593728010103516939', 'title': 'Sports Live Game 2020', 'url': 'https://sportslivegame2020.blogspot.com/2020/10/nfl-week4-live.html', 'canonicalUrl': 'https://sportslivegame2020.blogspot.com/2020/10/nfl-week4-live.html', 'homepageUrl': 'https://sportslivegame2020.blogspot.com/', 'searchUrl': 'https://sportslivegame2020.blogspot.com/search', 'canonicalHomepageUrl': 'https://sportslivegame2020.blogspot.com/', 'blogspotFaviconUrl': 'https://sportslivegame2020.blogspot.com/favicon.ico', 'bloggerUrl': 'https://www.blogger.com', 'hasCustomDomain': false, 'httpsEnabled': true, 'enabledCommentProfileImages': true, 'gPlusViewType': 'FILTERED_POSTMOD', 'adultContent': false, 'analyticsAccountNumber': '', 'encoding': 'UTF-8', 'locale': 'en', 'localeUnderscoreDelimited': 'en', 'languageDirection': 'ltr', 'isPrivate': false, 'isMobile': false, 'isMobileRequest': false, 'mobileClass': '', 'isPrivateBlog': false, 'isDynamicViewsAvailable': true, 'feedLinks': '\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Sports Live Game 2020 - Atom\x22 href\x3d\x22https://sportslivegame2020.blogspot.com/feeds/posts/default\x22 /\x3e\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/rss+xml\x22 title\x3d\x22Sports Live Game 2020 - RSS\x22 href\x3d\x22https://sportslivegame2020.blogspot.com/feeds/posts/default?alt\x3drss\x22 /\x3e\n\x3clink rel\x3d\x22service.post\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Sports Live Game 2020 - Atom\x22 href\x3d\x22https://www.blogger.com/feeds/2593728010103516939/posts/default\x22 /\x3e\n\n\x3clink rel\x3d\x22alternate\x22 type\x3d\x22application/atom+xml\x22 title\x3d\x22Sports Live Game 2020 - Atom\x22 href\x3d\x22https://sportslivegame2020.blogspot.com/feeds/4304760734249315640/comments/default\x22 /\x3e\n', 'meTag': '', 'adsenseHostId': 'ca-host-pub-1556223355139109', 'adsenseHasAds': false, 'view': '', 'dynamicViewsCommentsSrc': '//www.blogblog.com/dynamicviews/4224c15c4e7c9321/js/comments.js', 'dynamicViewsScriptSrc': '//www.blogblog.com/dynamicviews/b1e98b1c39e2fd20', 'plusOneApiSrc': 'https://apis.google.com/js/plusone.js', 'disableGComments': true, 'sharing': {'platforms': [{'name': 'Get link', 'key': 'link', 'shareMessage': 'Get link', 'target': ''}, {'name': 'Facebook', 'key': 'facebook', 'shareMessage': 'Share to Facebook', 'target': 'facebook'}, {'name': 'BlogThis!', 'key': 'blogThis', 'shareMessage': 'BlogThis!', 'target': 'blog'}, {'name': 'Twitter', 'key': 'twitter', 'shareMessage': 'Share to Twitter', 'target': 'twitter'}, {'name': 'Pinterest', 'key': 'pinterest', 'shareMessage': 'Share to Pinterest', 'target': 'pinterest'}, {'name': 'Email', 'key': 'email', 'shareMessage': 'Email', 'target': 'email'}], 'disableGooglePlus': true, 'googlePlusShareButtonWidth': 300, 'googlePlusBootstrap': '\x3cscript type\x3d\x22text/javascript\x22\x3ewindow.___gcfg \x3d {\x27lang\x27: \x27en\x27};\x3c/script\x3e'}, 'hasCustomJumpLinkMessage': false, 'jumpLinkMessage': 'Read more', 'pageType': 'item', 'postId': '4304760734249315640', 'pageName': 'NFL Week4 Live', 'pageTitle': 'Sports Live Game 2020: NFL Week4 Live'}}, {'name': 'features', 'data': {'sharing_get_link_dialog': 'true', 'sharing_native': 'false'}}, {'name': 'messages', 'data': {'edit': 'Edit', 'linkCopiedToClipboard': 'Link copied to clipboard!', 'ok': 'Ok', 'postLink': 'Post Link'}}, {'name': 'template', 'data': {'name': 'Contempo', 'localizedName': 'Contempo', 'isResponsive': true, 'isAlternateRendering': false, 'isCustom': false, 'variant': 'indie_light', 'variantId': 'indie_light'}}, {'name': 'view', 'data': {'classic': {'name': 'classic', 'url': '?view\x3dclassic'}, 'flipcard': {'name': 'flipcard', 'url': '?view\x3dflipcard'}, 'magazine': {'name': 'magazine', 'url': '?view\x3dmagazine'}, 'mosaic': {'name': 'mosaic', 'url': '?view\x3dmosaic'}, 'sidebar': {'name': 'sidebar', 'url': '?view\x3dsidebar'}, 'snapshot': {'name': 'snapshot', 'url': '?view\x3dsnapshot'}, 'timeslide': {'name': 'timeslide', 'url': '?view\x3dtimeslide'}, 'isMobile': false, 'title': 'NFL Week4 Live', 'description': '', 'url': 'https://sportslivegame2020.blogspot.com/2020/10/nfl-week4-live.html', 'type': 'item', 'isSingleItem': true, 'isMultipleItems': false, 'isError': false, 'isPage': false, 'isPost': true, 'isHomepage': false, 'isArchive': false, 'isLabelSearch': false, 'postId': 4304760734249315640}}, {'name': 'widgets', 'data': [{'title': 'Search This Blog', 'type': 'BlogSearch', 'sectionId': 'search_top', 'id': 'BlogSearch1'}, {'title': 'Sports Live Game 2020 (Header)', 'type': 'Header', 'sectionId': 'header', 'id': 'Header1'}, {'title': '', 'type': 'FeaturedPost', 'sectionId': 'page_body', 'id': 'FeaturedPost1', 'postId': '4304760734249315640'}, {'title': 'Blog Posts', 'type': 'Blog', 'sectionId': 'page_body', 'id': 'Blog1', 'posts': [{'id': '4304760734249315640', 'title': 'NFL Week4 Live', 'showInlineAds': true}], 'headerByline': {'regionName': 'header1', 'items': [{'name': 'share', 'label': ''}, {'name': 'timestamp', 'label': ''}]}, 'footerBylines': [{'regionName': 'footer1', 'items': [{'name': 'comments', 'label': 'comments'}, {'name': 'icons', 'label': ''}]}, {'regionName': 'footer2', 'items': [{'name': 'labels', 'label': ''}]}, {'regionName': 'footer3', 'items': [{'name': 'location', 'label': 'Location:'}]}], 'allBylineItems': [{'name': 'share', 'label': ''}, {'name': 'timestamp', 'label': ''}, {'name': 'comments', 'label': 'comments'}, {'name': 'icons', 'label': ''}, {'name': 'labels', 'label': ''}, {'name': 'location', 'label': 'Location:'}]}, {'title': '', 'type': 'PopularPosts', 'sectionId': 'page_body', 'id': 'PopularPosts1', 'posts': [{'title': 'Watch NFL Sunday Football 2020 Live Stream Free on fuboTV', 'id': 8622422278383891770}, {'title': 'Watch NFL Sunday Football Live Streaming Online Free on FuboTV', 'id': 472761083013419399}, {'title': 'NFL Sunday Football 2002 Live Streaming Online Free', 'id': 1547207736609365491}]}, {'type': 'Attribution', 'sectionId': 'footer', 'id': 'Attribution1'}, {'title': '', 'type': 'HTML', 'sectionId': 'sidebar_top', 'id': 'HTML1'}, {'title': 'About Me', 'type': 'Profile', 'sectionId': 'sidebar_top', 'id': 'Profile1'}, {'type': 'BlogArchive', 'sectionId': 'sidebar_bottom', 'id': 'BlogArchive1'}, {'title': '', 'type': 'ReportAbuse', 'sectionId': 'sidebar_bottom', 'id': 'ReportAbuse1'}]}]);"28:T4d0,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:T5c2,--type=renderer --primordial-pipe-token=CE8C46749DD6E92CB19E3E5549670660 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/18.11.20036 Chrome/59.0.3071.15" --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=CE8C46749DD6E92CB19E3E5549670660 --renderer-client-id=2 --mojo-platform-channel-handle=1276 --allow-no-sandbox-job /prefetch:12a:T5c2,--type=renderer --primordial-pipe-token=CFB555E0C6E1BF98A827995D360BA3B8 --lang=en-US --disable-pack-loading --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat Reader DC\Reader\AcroCEF\debug.log" --log-severity=disable --product-version="ReaderServices/18.11.20036 Chrome/59.0.3071.15" --enable-pinch --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=CFB555E0C6E1BF98A827995D360BA3B8 --renderer-client-id=3 --mojo-platform-channel-handle=1324 --allow-no-sandbox-job /prefetch:11d:["$","$L2",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample 59c2ea725d9e… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample 59c2ea725d9e…. Threat score 0/100. 2/30 AV engines flagged this file. 1 malicious and 5 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/59c2ea725d9eca1d7b76c3d5a949865af27ef30dc2c9828556af5e5d4808c3f0\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"59c2ea725d9eca1d7b76c3d5a949865af27ef30dc2c9828556af5e5d4808c3f0\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"official-kansas-city-chiefs-vs-new-england-patriots-live.pdf\",\"applicationCategory\":[\"pdf\"],\"identifier\":\"59c2ea725d9eca1d7b76c3d5a949865af27ef30dc2c9828556af5e5d4808c3f0\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":2,\"total\":30},\"behavioralIndicators\":{\"malicious\":1,\"suspicious\":5},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L25",null,{"initialData":{"schema_version":"1.0.15","sha256":"59c2ea725d9eca1d7b76c3d5a949865af27ef30dc2c9828556af5e5d4808c3f0","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"NOT_AVAILABLE","sandbox_status":"SUCCESS","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1790344125999,"unified_at":"2026-09-25T13:48:45.999Z","metadata":{"hashes":{"sha256":"59c2ea725d9eca1d7b76c3d5a949865af27ef30dc2c9828556af5e5d4808c3f0","sha1":"0177350b6b6c3ac0809897c27c15bc88a3d604a1","md5":"577e2dd9ef5ba8885f6c0b10eb472985","sha512":"d83f153108b51196914ac329cd6e763127ef6f05541f42e9994f8351b0a6c24a1885ab3b0e797e538af0c35dcfda02a8c5a9cffd8cc82b9a19d6f9b1fbade5e1","ssdeep":"12288:m2pG/wL9LYZ/rlB/yKQN2dITimB9BxsB5RSkcvYKZbY5Q83XAjo:eyLY5r3qN2ITimDByta8h","ssdeep_chunks":["12288:m2pG/wL","12288:2pG/wL9","12288:pG/wL9L","12288:G/wL9LY","12288:/wL9LYZ","12288:wL9LYZ/","12288:L9LYZ/r","12288:9LYZ/rl","12288:LYZ/rlB","12288:YZ/rlB/","12288:Z/rlB/y","12288:/rlB/yK","12288:rlB/yKQ","12288:lB/yKQN","12288:B/yKQN2","12288:/yKQN2d","12288:yKQN2dI","12288:KQN2dIT","12288:QN2dITi","12288:N2dITim","12288:2dITimB","12288:dITimB9","12288:ITimB9B","12288:TimB9Bx","12288:imB9Bxs","12288:mB9BxsB","12288:B9BxsB5","12288:9BxsB5R","12288:BxsB5RS","12288:xsB5RSk","12288:sB5RSkc","12288:B5RSkcv","12288:5RSkcvY","12288:RSkcvYK","12288:SkcvYKZ","12288:kcvYKZb","12288:cvYKZbY","12288:vYKZbY5","12288:YKZbY5Q","12288:KZbY5Q8","12288:ZbY5Q83","12288:bY5Q83X","12288:Y5Q83XA","12288:5Q83XAj","12288:Q83XAjo","24576:m2pG/wL","24576:2pG/wL9","24576:pG/wL9L","24576:G/wL9LY","24576:/wL9LYZ","24576:wL9LYZ/","24576:L9LYZ/r","24576:9LYZ/rl","24576:LYZ/rlB","24576:YZ/rlB/","24576:Z/rlB/y","24576:/rlB/yK","24576:rlB/yKQ","24576:lB/yKQN","24576:B/yKQN2","24576:/yKQN2d","24576:yKQN2dI","24576:KQN2dIT","24576:QN2dITi","24576:N2dITim","24576:2dITimB","24576:dITimB9","24576:ITimB9B","24576:TimB9Bx","24576:imB9Bxs","24576:mB9BxsB","24576:B9BxsB5","24576:9BxsB5R","24576:BxsB5RS","24576:xsB5RSk","24576:sB5RSkc","24576:B5RSkcv","24576:5RSkcvY","24576:RSkcvYK","24576:SkcvYKZ","24576:kcvYKZb","24576:cvYKZbY","24576:vYKZbY5","24576:YKZbY5Q","24576:KZbY5Q8","24576:ZbY5Q83","24576:bY5Q83X","24576:Y5Q83XA","24576:5Q83XAj","24576:Q83XAjo","12288:eyLY5r3","12288:yLY5r3q","12288:LY5r3qN","12288:Y5r3qN2","12288:5r3qN2I","12288:r3qN2IT","12288:3qN2ITi","12288:qN2ITim","12288:N2ITimD","12288:2ITimDB","12288:ITimDBy","12288:TimDByt","12288:imDByta","12288:mDByta8","12288:DByta8h"],"imphash":"Unknown"},"file_info":{"file_name":"official-kansas-city-chiefs-vs-new-england-patriots-live.pdf","file_type":["pdf"],"file_type_id":"pdf","file_size":676408,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1601939785000,"last_seen":1655029552000,"last_multi_scan":1655029552000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":2,"suspicious_count":0,"total_engines":30},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":4},"sandbox_signatures":{"informative_count":14,"suspicious_count":5,"malicious_count":1,"total":20},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"aegislab":{"name":"AegisLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bytehero":{"name":"ByteHero","success":true,"verdict":"malicious","threat_name":"Unavailable (production)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"comodo":{"name":"Comodo","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"undetected","status":"clean","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"cyren":{"name":"Cyren","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"ikarus":{"name":"IKARUS","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"kaspersky":{"name":"Kaspersky","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"mcafee":{"name":"McAfee","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"nanoav":{"name":"NANOAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"quickheal":{"name":"Quick Heal","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"rocketcyber":{"name":"RocketCyber","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"scrutiny":{"name":"Scrutiny","success":true,"verdict":"malicious","threat_name":"Unavailable (production)","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"symantec":{"name":"Symantec","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicro":{"name":"Trend Micro","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trendmicrohousecall":{"name":"Trend Micro HouseCall","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"virusblokada":{"name":"VirusBlokAda","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"webrootsmd":{"name":"Webroot SMD","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xvirusantimalware":{"name":"Xvirus Anti-Malware","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Privilege Escalation","technique":"Process Injection","attack_id":"T1055","attack_id_wiki":"https://attack.mitre.org/techniques/T1055","identifiers":[{"type":"informative","value":"Found a string that may be used as part of an injection method"}],"sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"tactic":"Defense Evasion","technique":"DCShadow","attack_id":"T1207","attack_id_wiki":"https://attack.mitre.org/techniques/T1207","identifiers":[{"type":"informative","value":"Contains object with compressed stream data"}],"sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"tactic":"Defense Evasion","technique":"Deobfuscate/Decode Files or Information","attack_id":"T1140","attack_id_wiki":"https://attack.mitre.org/techniques/T1140","identifiers":[{"type":"suspicious","value":"Contains escaped byte string (often part of obfuscated shellcode)"}],"sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"tactic":"Discovery","technique":"Application Window Discovery","attack_id":"T1010","attack_id_wiki":"https://attack.mitre.org/techniques/T1010","identifiers":[{"type":"informative","value":"Scanning for window names"}],"sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]}],"sandbox_signatures":[{"level":"informative","category":"External Systems","name":"Detected Suricata Alert","description":"Detected alert \"ET USER_AGENTS Microsoft Device Metadata Retrieval Client User-Agent\" (SID: 2027390, Rev: 3, Severity: 3) categorized as \"Unknown Traffic\"\n Detected alert \"ET INFO Windows OS Submitting USB Metadata to Microsoft\" (SID: 2025275, Rev: 3, Severity: 3) categorized as \"Misc activity\"","origin":"Suricata Alerts","relevance":10,"id":"suricata-0","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"informative","category":"General","name":"Contacts domains","description":"\"_ldap._tcp.dc._msdcs.scl3.dc\"\n \"isatap.scl3.dc\"\n \"wpad.scl3.dc\"","origin":"Network Traffic","relevance":1,"id":"network-0","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"informative","category":"General","name":"Contains object with compressed stream data","description":"Object ID 4 contains compressed stream data: No filters\n Object ID 42 contains compressed stream data: No filters\n Object ID 49 contains compressed stream data: No filters\n Object ID 53 contains compressed stream data: /CIDInit /ProcSet findresource begin\n19 dict begin\nbegincmap\n/CIDSystemInfo\n<< /Registry (Adobe)\n/Ordering (UCS)\n/Supplement 0\n>> def\n/CMapName /Adobe-Identity-UCS def\n/CMapType 2 def\n1 begincodespacerange\n<0000> <FFFF>\nendcodespace ...","origin":"Static Parser","mitre_attack_id":"T1207","relevance":10,"id":"static-66","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"informative","category":"General","name":"Creates mutants","description":"\"DBWinMutex\"\n \"Local\\Acrobat Instance Mutex\"\n \"\\Sessions\\1\\BaseNamedObjects\\com.adobe.acrobat.rna.RdrCefBrowserLock.DC\"\n \"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex\"\n \"com.adobe.acrobat.rna.RdrCefBrowserLock.DC\"","origin":"Created Mutant","relevance":3,"id":"mutant-0","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"informative","category":"General","name":"PDF file has an embedded URL","description":"\"https://sportslivegame2020.blogspot.com/2020/10/nfl-week4-live.html\" (Based on: \"59c2ea725d9eca1d7b76c3d5a949865af27ef30dc2c9828556af5e5d4808c3f0.bin\")","origin":"File/Memory","relevance":3,"id":"string-25","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"informative","category":"General","name":"Process launched with changed environment","description":"Process \"RdrCEF.exe\" (UID: 00064967-00002404) was launched with modified environment variables: \"Path\"","origin":"Monitored Target","relevance":10,"id":"target-67","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"informative","category":"General","name":"Scanning for window names","description":"\"AcroRd32.exe\" searching for class \"AdobeAcrobatSpeedLaunchCmdWnd\"\n \"AcroRd32.exe\" searching for class \"AdobeReaderSpeedLaunchCmdWnd\"\n \"AcroRd32.exe\" searching for window \"_AcroAppTimer\"\n \"AcroRd32.exe\" searching for class \"Acrobat Instance Window Class\"\n \"AcroRd32.exe\" searching for class \"ACROSEMAPHORE_R18\"\n \"AcroRd32.exe\" searching for class \"JFWUI2\"\n \"AcroRd32.exe\" searching for class \"Shell_TrayWnd\"","origin":"API Call","mitre_attack_id":"T1010","relevance":10,"id":"api-70","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"informative","category":"General","name":"Spawns new processes","description":"Spawned process \"RdrCEF.exe\" with commandline \"--backgroundcolor=16448250\" (UID: 00064967-00002404)\n Spawned process \"RdrCEF.exe\" with commandline \"--type=renderer --primordial-pipe-token=CE8C46749DD6E92CB19E3E55 ...\" (UID: 00065064-00003176)\n Spawned process \"RdrCEF.exe\" with commandline \"--type=renderer --primordial-pipe-token=CFB555E0C6E1BF98A827995D ...\" (UID: 00065101-00003420)","origin":"Monitored Target","relevance":3,"id":"target-25","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"informative","category":"Installation/Persistence","name":"Dropped files","description":"\"data_1\" has type \"data\"\n \"Visited Links\" has type \"data\"\n \"0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl\" has type \"data\"\n \"A9Rifpdya_g9cpja_33g.tmp\" has type \"data\"\n \"A9Roqsmb5_g9cpjb_33g.tmp\" has type \"data\"\n \"CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl\" has type \"data\"\n \"urlref_httpssportslivegame2020.blogspot.com202010nfl-week4-live.html\" has type \"HTML document ASCII text with very long lines\"","origin":"Binary File","relevance":3,"id":"binary-0","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"informative","category":"Installation/Persistence","name":"Found a string that may be used as part of an injection method","description":"\"Shell_TrayWnd\" (Taskbar window class may be used to inject into explorer with the SetWindowLong method)","origin":"File/Memory","mitre_attack_id":"T1055","relevance":4,"id":"string-4","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"informative","category":"Installation/Persistence","name":"Touches files in the Windows directory","description":"\"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\spool\\drivers\\color\\sRGB Color Space Profile.icm\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ariblk.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALN.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNB.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\tzres.dll\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\oleaccrc.dll\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\KBDUS.DLL\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\System32\\drivers\\etc\\hosts\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arial.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ariali.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\ARIALNI.TTF\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arialbd.ttf\"\n \"RdrCEF.exe\" touched file \"%WINDIR%\\Fonts\\arialbi.ttf\"","origin":"API Call","relevance":7,"id":"api-55","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$26","origin":"File/Memory","relevance":10,"id":"string-3","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Found a reference to a known community page","description":"\"\" (Indicator: \"twitter\")\n \"\" (Indicator: \"twitter\")","origin":"File/Memory","relevance":7,"id":"string-10","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"informative","category":"Unusual Characteristics","name":"Contains embedded objects that might be interesting to investigate","description":"Embedded object type \"/ObjStm\" (ID: 4, References: 8 0 R,7 0 R,6 0 R,10 0 R,15 0 R,21 0 R,28 0 R,9 0 R,11 0 R,12 0 R,13 0 R,14 0 R,18 0 R,19 0 R,25 0 R,26 0 R,27 0 R,29 0 R,30 0 R,31 0 R,32 0 R,33 0 R,34 0 R,35 0 R,36 0 R,37 0 R,5 0 R,8 0 R,38 0 R,9 0 R,11 0 R,12 0 R,13 0 R,18 0 R,20 0 R,23 0 R,24 0 R,25 0 R,26 0 R,17 0 R,8 0 R,38 0 R,8 0 R,38 0 R,8 0 R,38 0 R,15 0 R,8 0 R,38 0 R,16 0 R,17 0 R,14 0 R,38 0 R,40 0 R,38 0 R,15 0 R,38 0 R,8 0 R,38 0 R,20 0 R,21 0 R,24 0 R,8 0 R,38 0 R,19 0 R,38 0 R,22 0 R,23 0 R,19 0 R,38 0 R,41 0 R,38 0 R,21 0 R,38 0 R,19 0 R,38 0 R,8 0 R,38 0 R,8 0 R,38 0 R,8 0 R,39 0 R,27 0 R,29 0 R,30 0 R,31 0 R,32 0 R,33 0 R,34 0 R,35 0 R,36 0 R,37 0 R,8 0 R,39 0 R,8 0 R,39 0 R,8 0 R,39 0 R,8 0 R,39 0 R,8 0 R,39 0 R,8 0 R,39 0 R,8 0 R,39 0 R,8 0 R,39 0 R,8 0 R,39 0 R)","origin":"Static Parser","relevance":5,"id":"static-10","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"suspicious","category":"Exploit/Shellcode","name":"Contains escaped byte string (often part of obfuscated shellcode)","description":"$27","origin":"File/Memory","mitre_attack_id":"T1140","relevance":10,"id":"string-15","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"suspicious","category":"Exploit/Shellcode","name":"Possible heap spraying attempt detected","description":"\"RdrCEF.exe\" issued more than 3000 memory allocations","origin":"API Call","relevance":10,"id":"api-88","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"suspicious","category":"External Systems","name":"Found an IP/URL artifact that was identified as malicious by at least one reputation engine","description":"1/79 reputation engines marked \"http://www.blogger.com\" as malicious (1% detection rate)","origin":"External System","relevance":10,"id":"avtest-6","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"suspicious","category":"Installation/Persistence","name":"Creates new processes","description":"\"AcroRd32.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe\", Handle: 788)\n \"RdrCEF.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe\", Handle: 1340)\n \"RdrCEF.exe\" is creating a new process (Name: \"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe\", Handle: 1432)","origin":"API Call","relevance":8,"id":"api-2","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"suspicious","category":"Network Related","name":"Contacts Random Domain Names","description":"\"_ldap._tcp.dc._msdcs.scl3.dc\" seems to be random\n \"wpad.scl3.dc\" seems to be random","origin":"Network Traffic","relevance":5,"id":"network-6","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"level":"malicious","category":"Unusual Characteristics","name":"Document analysis contacts a domain","description":"Often seen on documents with macro droppers\n embedded files or exploits","origin":"Indicator Combinations","relevance":3,"id":"summary-1","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]}],"incidents":[{"name":"Network Behavior","details_count":1,"details":[{"detail":"Contacts 3 domains and 3 hosts"}],"sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]}]},"activity":{"stats":{"process_count":4,"spawned_processes_count":4,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":5,"imported_dlls_count":135,"dropped_files_count":0,"extracted_files_count":7,"files_written_count":155,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":7,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":7,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":3,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"sample_flags":["Network Traffic","Extracted Files"],"sandbox_reports":[{"id":"5f7ba948a3c9572513729d48","environment_id":100,"environment_description":"Windows 7 32 bit","state":"SUCCESS","verdict":"no specific threat","submit_name":"official-kansas-city-chiefs-vs-new-england-patriots-live.pdf","analysis_start_time":"2020-10-05T23:16:30+00:00","indicators_count":{"informative":14,"suspicious":5,"malicious":1},"tags":["Network Traffic","Extracted Files"],"is_in_unified_schema":true}],"network_activity":{"contacted_hosts":null,"dns_resolutions":[{"domain":"_ldap._tcp.dc._msdcs.scl3.dc","ttl":86397,"country":"-","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"domain":"isatap.scl3.dc","ttl":86383,"country":"-","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"domain":"wpad.scl3.dc","ttl":86398,"country":"-","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]}],"http_requests":null},"process_activity":{"sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}],"processes":[{"pid":4012,"ppid":0,"name":"AcroRd32.exe","command_line":"\"C:\\official-kansas-city-chiefs-vs-new-england-patriots-live.pdf\"","sha256":"2e9b9635469ff056f09023f7d671120d0c0f86f30767b06daa545c01242bcbef","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32.exe","uid":"00064432-00004012","icon":"$28"},{"pid":2404,"ppid":4012,"name":"RdrCEF.exe","command_line":"--backgroundcolor=16448250","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00064432-00004012","uid":"00064967-00002404"},{"pid":3176,"ppid":2404,"name":"RdrCEF.exe","command_line":"$29","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00064967-00002404","uid":"00065064-00003176"},{"pid":3420,"ppid":2404,"name":"RdrCEF.exe","command_line":"$2a","sha256":"9ed4787850281a1a549c623cd05a8f7fc01b25a5185f1e7b17d4cdb50fcf1f26","normalized_path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","parent_uid":"00064967-00002404","uid":"00065101-00003420"}],"all_imported_dlls":["AcroRd32Res.dll","netprofm.dll","hid.dll","d3d11.dll","dnsapi.dll","cryptsp.dll","comdlg32.dll","wkscli.dll","mscms.dll","tzres.dll","srvcli.dll","dbghelp.dll","msvcp120.dll","FWPUCLNT.DLL","lpk.dll","mswsock.dll","bcrypt.dll","msctf.dll","api-ms-win-downlevel-shell32-l1-1-0.dll","dui70.dll","rpcss.dll","crypt32.dll","msasn1.dll","dhcpcsvc6.dll","advapi32.dll","GdiPlus.dll","ccme_asym.dll","credssp.dll","wininet.dll","setupapi.dll","secur32.dll","wship6.dll","urlmon.dll","d3d8thk.dll","apphelp.dll","cfgmgr32.dll","api-ms-win-downlevel-advapi32-l1-1-0.dll","ccme_ecc.dll","ncrypt.dll","wtsapi32.dll","MMDevAPI.dll","user32.dll","winhttp.dll","BIB.dll","AXSLE.dll","imm32.dll","ExplorerFrame.dll","sspicli.dll","api-ms-win-downlevel-version-l1-1-0.dll","normaliz.dll","iertutil.dll","sechost.dll","wlanapi.dll","wevtapi.dll","dhcpcsvc.dll","rsaenh.dll","sqlite.dll","libcef.dll","msvcrt.dll","ws2_32.dll","userenv.dll","dwmapi.dll","api-ms-win-downlevel-advapi32-l2-1-0.dll","api-ms-win-downlevel-ole32-l1-1-0.dll","credui.dll","winnsi.dll","version.dll","AXE8SharedExpat.dll","webio.dll","ccme_base_non_fips.dll","netutils.dll","comctl32.dll","ACE.dll","clbcatq.dll","devobj.dll","cryptocme.dll","gpapi.dll","netapi32.dll","ntdll.dll","KernelBase.dll","WSHTCPIP.DLL","oleaut32.dll","api-ms-win-core-synch-l1-2-0.dll","chrome_elf.dll","dxgi.dll","IPHLPAPI.DLL","psapi.dll","winmm.dll","dxva2.dll","AcroRd32.dll","oleacc.dll","KBDUS.DLL","wshqos.dll","AGM.dll","ntmarta.dll","BIBUtils.dll","icudt.dll","usp10.dll","rpcrt4.dll","Wldap32.dll","ieframe.dll","WSDApi.dll","propsys.dll","duser.dll","api-ms-win-downlevel-user32-l1-1-0.dll","wlanutil.dll","gdi32.dll","profapi.dll","AudioSes.dll","shell32.dll","nsi.dll","api-ms-win-downlevel-normaliz-l1-1-0.dll","SensApi.dll","ccme_base.dll","DWrite.dll","wsock32.dll","npmproxy.dll","api-ms-win-downlevel-shlwapi-l2-1-0.dll","samcli.dll","d3d9.dll","wintrust.dll","oleaccrc.dll","rasadhlp.dll","msimg32.dll","kernel32.dll","ole32.dll","msvcr120.dll","cryptbase.dll","uxtheme.dll","RpcRtRemote.dll","CoolType.dll","api-ms-win-downlevel-shlwapi-l1-1-0.dll","nlaapi.dll","shlwapi.dll","cryptui.dll"]},"file_activity":{"dropped_files":null,"extracted_files":[{"name":"data_1","sha256":"0ce8bc83e23a45f57ae5e8640527460253421e904ad5c958bcb978c1eaf45e3f","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"name":"Visited Links","sha256":"9d1c9dc432b2e97f7a54b4da2724e4ff96dc719e60cb89c9f82dbec9226856c3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"name":"A9Rifpdya_g9cpja_33g.tmp","sha256":"96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"name":"A9Roqsmb5_g9cpjb_33g.tmp","sha256":"96a296d224f285c67bee93c30f8a309157f0daa35dc5b87e410b78630a09cfc7","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"name":"0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl","sha256":"d1bb4b163fe01acc368a92b385bb0bd3a9fc2340b6d485b77a20553a713166d3","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"name":"CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl","sha256":"9009ab7605c35a2b5121b8b5c966b3c893edba9966925268c45ad05b348671c8","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"name":"urlref_httpssportslivegame2020.blogspot.com202010nfl-week4-live.html","sha256":"ecec6996ac75582a4bd043bb7445ff97f5e941cd1fddb4a3e83aaa31bf12b329","verdict":"undetected","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]}],"files_written":[{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Visited Links","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\File System\\primary.origin","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\System32\\spool\\drivers\\color\\sRGB Color Space Profile.icm","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\arialnb.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\arialnbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\arialni.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\index.html","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\init.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\plugins.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\base_uris.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\libs\\require\\2.1.15\\require.min.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\adobe_spinner.gif","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\ariblk.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\rna-main.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-ui-theme.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\css\\main-cef-win.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-up.png","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\vscroll-thumb.png","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\win-scrollbar\\arrow-down.png","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\config.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-files-select\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files-select\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-selector.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\css\\home-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\add-account\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\js\\plugins\\rhp\\exportpdf-rna-tool-view.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\images\\core_icons.png","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\images\\rhp_world_icon.png","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\StaticCache.dat","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"C:\\share","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeSysFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\Cache\\AcroFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"pipe\\com.adobe.reader.rna.sLQf9eM.DC.0","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%TEMP%\\A9Rifpdya_g9cpja_33g.tmp","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\System32\\wshqos.dll","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%TEMP%\\A9R1pgsxaj_g9cpjd_33g.tmp","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\System32\\KBDUS.DLL","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\System32\\drivers\\etc\\hosts","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{E29AC6C2-7037-11DE-816D-806E6F6E6963}","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"\\DEVICE\\NETBT_TCPIP_{F5E5586C-DA91-47DA-AEAC-0A88CD2FFB01}","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\System32\\oleaccrc.dll","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\RdrCEF.exe","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\cep-plugins\\PIPViewer\\index.html","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroCEF\\crash_reporter.cfg","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Globalization\\Sorting\\SortDefault.nls","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\System32\\tzres.dll","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\arialbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\ariali.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\arialn.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\ariblk.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cookie\\Cookies","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\index","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_0","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_1","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_2","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\AcroCef\\DC\\Acrobat\\Cache\\Cache\\data_3","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\arial.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\ARIALN.TTF","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\ariali.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\ARIALNI.TTF","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\arialbd.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\ARIALNB.TTF","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\arialbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\ARIALNBI.TTF","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\timesbd.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\timesbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\timesi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\desktop.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\desktop-connector-files\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\home\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\aicuc\\css\\plugin-selectors.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main-selector.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\my-computer\\css\\main.css","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\tracked-send\\js\\plugins\\tracked-send\\js\\home-view\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\selector.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\static\\js\\plugins\\scan-files\\js\\plugin.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\segoeuil.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\SEGOEUISL.TTF","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\segoeui.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\segoeuii.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\seguisb.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\segoeuib.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\segoeuiz.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\times.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\timesi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\timesbd.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\Fonts\\timesbi.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\System32\\en-US\\KernelBase.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\segoeui.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\segoeuib.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\segoeuii.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\segoeuil.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\segoeuisl.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\segoeuiz.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\fonts\\seguisb.ttf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroRd32Res.dll","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"C:\\Users\\%OSUSER%","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%USERPROFILE%\\AppData\\Local","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\UserCache.bin","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\System32\\en-US\\user32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\System32\\rsaenh.dll","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"C:\\official-kansas-city-chiefs-vs-new-england-patriots-live.pdf","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\Viewer.aapp","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%USERPROFILE%\\AppData\\Roaming","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\IconCacheRdr65536.dat","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\System32\\en-US\\msctf.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\cversions.1.db","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x0000000000000027.db","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"C:\\Program Files","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"C:\\Users\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"C:\\Users","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%USERPROFILE%\\AppData","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%USERPROFILE%\\Desktop\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeComFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\AdobeCMapFnt18.lst","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\ow\\Adobe\\Acrobat\\DC\\ReaderMessages","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\AcroApp\\ENU\\EPDF_RHP.aapp","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\version.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\WebResources\\Resource0\\variant.js","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Adobe\\Acrobat\\DC\\SharedDataEvents","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\ow\\Adobe\\Acrobat\\DC\\ReaderMessages-journal","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\EScript.api","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%USERPROFILE%\\Documents\\desktop.ini","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%WINDIR%\\System32\\en-US\\shell32.dll.mui","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\weblink.api","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%LOCALAPPDATA%\\Microsoft\\Windows\\Temporary Internet Files\\counters.dat","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"C:","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%TEMP%\\A9Roqsmb5_g9cpjb_33g.tmp","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%TEMP%\\A9R1fp5kzp_g9cpjc_33g.tmp","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%PROGRAMFILES%\\Adobe\\Acrobat Reader DC\\Reader\\plug_ins\\IA32.api","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"path":"%TEMP%\\A9R1mx84kd_g9cpje_33g.tmp","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]}],"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":[{"key":"HKLM\\SYSTEM\\ACROBATVIEWERCPP473\\","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYSERVER\\PROXYSERVER","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\PROXYOVERRIDE\\PROXYOVERRIDE","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTOCONFIGURL\\AUTOCONFIGURL","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\AUTODETECT\\AUTODETECT","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\{0C70BB6D-CFA8-4734-A158-28619E142726}\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"key":"HKCU\\SOFTWARE\\MICROSOFT\\WINDOWS\\CURRENTVERSION\\INTERNET SETTINGS\\WPAD\\AC-1F-6B-0D-DB-84\\WPADDETECTEDURL\\WPADDETECTEDURL","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]}]},"mutex_activity":{"mutex_created":[{"name":"DBWinMutex","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"name":"Local\\Acrobat Instance Mutex","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\com.adobe.acrobat.rna.RdrCefBrowserLock.DC","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"name":"\\Sessions\\1\\BaseNamedObjects\\DBWinMutex","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]},{"name":"com.adobe.acrobat.rna.RdrCefBrowserLock.DC","sources":[{"report_type":"sandbox","report_id":"5f7ba948a3c9572513729d48"}]}]}},"report_ids":{"sandbox_job_ids":["5f7ba948a3c9572513729d48"]}}}]]}] 20:null 24:[["$","title","0",{"children":"Sample 59c2ea725d9e… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample 59c2ea725d9e…. Threat score 0/100. 2/30 AV engines flagged this file. 1 malicious and 5 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/59c2ea725d9eca1d7b76c3d5a949865af27ef30dc2c9828556af5e5d4808c3f0"}],["$","meta","4",{"property":"og:title","content":"Sample 59c2ea725d9e… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample 59c2ea725d9e…. Threat score 0/100. 2/30 AV engines flagged this file. 1 malicious and 5 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/59c2ea725d9eca1d7b76c3d5a949865af27ef30dc2c9828556af5e5d4808c3f0"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample 59c2ea725d9e… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample 59c2ea725d9e…. Threat score 0/100. 2/30 AV engines flagged this file. 1 malicious and 5 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L2b","11",{}]]

NFL Week4 Live

Popular posts from this blog

Watch NFL Sunday Football 2020 Live Stream Free on fuboTV

Watch NFL Sunday Football Live Streaming Online Free on FuboTV

NFL Sunday Football 2002 Live Streaming Online Free